Manage Software with JumpCloud Private Repository

With JumpCloud's Software Management Private Repository, you can upload and install Windows and Apple software application files through an intuitive and frictionless interface. With this feature, you don't have to host custom applications yourself or depend on third-party solutions.

 Some benefits of the JumpCloud Private Repository include:

  • Control the files you deploy to your endpoints
  • Eliminate the time and expense involved in setting up and maintaining your own hosting solution
  • Control which applications gets installed where, without having to rely on public application repositories

Considerations:

  • Currently, only MSI (Windows) and PKG (Apple) file formats are supported.
  • Storage (total across entire repository) is limited to 10GB.
  • Egress (data consumed from the repository) is limited to 10GB per licensed user per month.
  • Maximum allowable application size is 5GB.

Prerequisites:

  • Requires Windows MDM for MSI deployments
  • Requires Apple MDM for PKG deployments
  • Packages must include valid, signed certifications

Known Issues:

  • Windows:
    • When unbinding a device from within the application's Devices tab, the status reverts to Install Pending. For the time being, we don't recommend unbinding to remove a custom app from a device. Workaround: Manually uninstall the application from the device.
    • When adding a command line to an existing application's configuration, the save button is disabled. Workaround: Change the name of the application to enable the save button.
  • All OSes - Depending on your screen size, the application page's Devices tab may not paginate correctly. Workaround: Resize your screen or use search/filter to find specific devices.

Uploading and Validating Application Files

Windows Custom Application

These steps walk you through uploading and validating an application file for Windows devices. You can also configure Windows applications with command line options before installing them.

  1. In the Admin Portal, go to DEVICE MANAGEMENT > Software Management > Windows.
  2. Click +.
  3. Select Custom App. A New Custom App panel opens.

Note:

To learn about Windows Software Management with Chocolatey Apps, see Manage Software for Windows with Chocolatey.

  1. Under Application Details, enter the Application Name.
  2. (Optional) Under Deployment Configurations, enter any desired installer flags, such as /quiet or others.

Note:

With all inputs, the msiexec /i command is implied and not needed.

  1. Under Upload File, drag and drop a file to the upload area or click Choose a File to browse for a file. Only MSI file types are supported for Windows devices.
  2. Click Upload. An upload progress bar appears and you will see a File uploaded successfully message.
  3. As the file is being processed, you will see a message: Your application request is still processing. Once the processing is complete, you will be able to associate devices.
  4. When this message disappears, you can bind and install the applications on specific devices or device groups. See Binding and Installing Applications on Devices or Device Groups.

Apple Custom Application

Note:

Custom application deployment via PKG files is not compatible with iOS devices. Apple mandates that applications for iOS devices be distributed exclusively through the Apple App Store.

These steps walk you through uploading and validating an application file on Apple devices.

  1. In the Admin Portal, go to DEVICE MANAGEMENT > Software Management > Apple.
  2. Click + to add a new managed software app.
  3. Select Custom App. A New Custom App panel opens.

Note:

To learn about Apple Software Management with self-hosted or VPP apps, see Software Management: macOS and iOS.

  1. Under Application Details, enter the Application Name.
  2. Under Upload File, drag and drop a file to the upload area or click Choose a File to browse for a file. Only PKG file types are supported for Apple devices.
  3. Click Upload. An upload progress bar appears and you will see a File uploaded successfully message.
  4. As the file is being processed, you will see a message: Your application request is still processing. Once the processing is complete, you will be able to associate devices.
  5. When this message disappears, you can bind and install the application on specific devices or device groups. See Binding and Installing Applications on Devices or Device Groups.

Resolving Upload or Validation Failures

Upload Failures

When a software upload fails, a message appears on the Details tab: "The file upload failed. Please delete this instance and try again." To proceed, click Delete to remove the application instance and follow the upload process again.

Validation Failures

Note:

Failed validation is only displayed by clicking in to the application details from the Software Management list.

When a package upload can't be validated, a message appears in the Details tab of the newly created application. To proceed, click Delete to remove the application instance and start the upload process again.

Binding and Installing Applications on Devices or Device Groups

Note:

If you are adding a new managed software application, you have the option to bind and install the application directly after uploading it.

  1. In the Admin Portal, go to DEVICE MANAGEMENT > Software Management
  2. Choose the appropriate OS tab and find the application you want to bind or unbind.
  3. Click to open the managed application details.
  4. From the Devices tab, select the devices where you want to install the software.
  5. Click the Device Groups tab and select the device groups where you want to bind the application. The application will be installed on all devices within the group with an eligible OS for that application type.
    • To unbind device groups, select Show bound device groups to see the groups where the application is currently bound, then clear the selection next to groups you want to unbind. Unbinding software from a device group will remove bindings for all devices within the group.
    • Unbinding a managed software instance from devices and/or device groups does not uninstall the application from those devices.

Note:

If the device group has dynamic membership controls, be aware that devices will be added and/or removed in the future based on the rule-based attributes of the group. See Configure Dynamic Device Groups for more information. Further, it is not possible to remove individual bound device(s) from a dynamic group within Software Management, as the device will be re-enrolled into the device group if it still meets the rule-based attributes associated with the group. You will need to unbind the device from the dynamic group under Device Groups first.

  1. When you are finished selecting the devices and device groups where you want the application to be installed, click Save & Install. A Managed Software Associations confirmation appears.
  2. Click Save & Install to proceed with the software installation. A success message indicates whether the installation was successful.
    • MSI packages are downloaded to C:\Windows\System32\config\systemprofile\AppData\Local\mdm and installed on the device at C:\Program Files\.

Viewing the Status of Managed Software

  1. From the managed application details screen, click the Status tab to see the status of the application, including all devices where the application is bound, and the installation status.
    • For Windows devices:
      • Install Failed: Installation failed on the device. Action is required.
        • Click Retry to initiate a retry installation on a single device.
      • Install Success: Installation succeeded and the application is now managed by JumpCloud on the device. No action is required.
      • Install Pending: Installation is in progress on the device. No action is currently required.
    • For macOS devices:
      • Command Failed: Installation failed on the device. Action is required.
        • Click Retry to initiate a retry installation on a single device.
      • Command Sent: The install command was sent successfully, but we cannot confirm the device has installed the application.
      • Install Pending: Installation is in progress on the device. No action is currently required.
  2. Click View to see installation results specific to the individual device, including versioning information for the application and expanded status details.

Deleting Managed Software Configurations

Note:

Deleting a managed software instance from devices and/or device groups does not uninstall the application from those devices.

To delete a managed software:

  1. In the Admin Portal, go to DEVICE MANAGEMENT > Software Management
  2. Choose the appropriate OS tab and select the application you want to delete.
  3. Click delete. A confirmation modal appears.
    • For managed Apple software packages, enter the number of applications you are attempting to delete and click delete.
    • For managed Windows software packages, click delete.
  4. The application is no longer managed by JumpCloud. Note this does not uninstall the application from any bound devices.

Troubleshooting

Windows MSI package fails to upload with a status message similar to “enforcement failed for MDM app installation for custom app name x at version x”.

Cause:

The install could fail for many reasons, such as:

  • Installer is not compatible with Windows version
  • Application is already installed at a greater version and a downgrade is not allowed
  • Another application install is in progress or stuck
  • Network connectivity issue

Resolution:

Some failures can recover with a retry, but some will not. Microsoft MDM cannot distinguish between the failures by the status Windows sends, so it continues to retry. Windows will try to install apps three times before sending a failure status to Microsoft MDM. After this status is sent, Microsoft MDM will send a failed status to the relevant devices and schedule the application install to retry in 24 hours.

Back to Top

List IconIn this Article

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case